]> git.proxmox.com Git - mirror_ubuntu-eoan-kernel.git/commit
netfilter: ip6t_{hbh,dst}: Rejects not-strict mode on rule insertion
authorYasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp>
Wed, 24 Sep 2008 22:53:39 +0000 (15:53 -0700)
committerDavid S. Miller <davem@davemloft.net>
Wed, 24 Sep 2008 22:53:39 +0000 (15:53 -0700)
commit8ca31ce52a5cfd03b960fd81a49197ae85d25347
tree741d9f22a3da1b8ff023153d52c3c22422a04a9d
parent5fbcd260c2c52f78cd699f65e9c7af2e60b5380c
netfilter: ip6t_{hbh,dst}: Rejects not-strict mode on rule insertion

The current code ignores rules for internal options in HBH/DST options
header in packet processing if 'Not strict' mode is specified (which is not
implemented). Clearly it is not expected by user.

Kernel should reject HBH/DST rule insertion with 'Not strict' mode
in the first place.

Signed-off-by: Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/netfilter/ip6t_hbh.c